HealthCare.com Insurance Services with subject Lost job-based coverage? Your 60-day enrollment window may already be open

For the record, this is an HealthCare.com Insurance Services phishing email attempt that is recently going around, with subject "Lost job-based coverage? Your 60-day enrollment window may already be open"

What to do?  Report them, go to bottom of page. 

From: HealthCare.com Health Insurance Plan Choices <alert@qorinact.com> Subject: Lost job-based coverage? Your 60-day enrollment window may already be open. healthcare.com A non-government resource Did you lose your health insurance benefits? You may be eligible for lower monthly premiums. See if I'm Eligible See if you qualify for health insurance plans at or below $50 per month.* You may be eligible for Special Enrollment health coverage if you:** Lost health coverage due to job loss Moved to a new zip code Turned 26 and lost coverage Lost eligibility for a student health plan Had a baby And many more reasons... See if I'm Eligible healthcare.com * Eligibility for Affordable Care Act (ACA) Advance Premium Tax Credit (APTC) and cost-sharing reductions is based on annual federal income thresholds, household size, and plan availability within the applicable service area. If enhanced tax subsidies enacted under the American Rescue Plan Act (ARPA) and Inflation Reduction Act (IRA) are unavailable, premium tax credit amounts may be reduced. For plan year 2026, eligible enrollees may have access to ACA coverage at or below $50 after the APTC is applied, subject to federal eligibility determinations. Premium rates, plan availability, and subsidy amounts vary by state and marketplace. Final eligibility and premium obligations are determined by the Health Insurance Marketplace under Internal Revenue Code §36B and applicable federal regulations. "Plan Year 2026 Marketplace Plans and Prices Fact Sheet." CMS.gov, October 28, 2025. https://www.cms.gov/newsroom/fact-sheets/plan-year-2026-marketplace-plans-prices-fact-sheet ** https://www.healthcare.gov/coverage/what-marketplace-plans-cover/ This is a solicitation for insurance. Healthcare.com is a non-government website of HealthCare.com Insurance Services, LLC, a health insurance agency that presents health plans, which may include Affordable Care Act (ACA) plans, and private insurance plans, including short-term medical insurance or indemnity insurance based on the consumer's selection. Qualified ACA plans must meet or exceed the essential benefit requirements of the Affordable Care Act; non-ACA plans are not required to provide all of the essential benefit requirements contained in the Affordable Care Act. Pre-existing condition provisions, benefit availability, limitations and exclusions vary by plan type and state. You should review all plan details and product brochures before purchase. To qualify for ACA health insurance coverage outside of the open enrollment period, you must meet special enrollment requirements.

Phishing Link

1. https://qorinact.com/c/xxxx

How to tell this is a Phishing email?

1. Check email address in full, if it's not from originating company then it's phishing.
2. Hover over all links in email, if it's not from the company's website then forget it.
3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source

1. Outlook.com->Actions->View Message Source. 
2. Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------

Report Phishing Email (not as Spam)

1. Outlook.com->Junk (at Top)->Phishing Scam
2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, DigitalOcean) and ISPs

1. SpamCop.net - Sign up for SpamCop reporting

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------

💣 📧 Check if your username or email has been hacked

SoundBright Hearing Aids Phishing Email with subject Hearing Aids Shouldn't Cost $5,000 (Here's Proof)

For the record, this is an My Timeshare phishing email attempt that is recently going around, with subject "Hearing Aids Shouldn't Cost $5,000 (Here's Proof)"

What to do?  Report them, go to bottom of page. 

From: Soundbright.com Ad <alert@qorinact.com> Subject: Hearing Aids Shouldn't Cost $5,000 (Here's Proof) Discreet Hearing Aids designed for Everyday Comfort

Phishing Link

1. https://qorinact.com/c/xxxx

How to tell this is a Phishing email?

1. Check email address in full, if it's not from originating company then it's phishing.
2. Hover over all links in email, if it's not from the company's website then forget it.
3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source

1. Outlook.com->Actions->View Message Source. 
2. Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------

Report Phishing Email (not as Spam)

1. Outlook.com->Junk (at Top)->Phishing Scam
2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, DigitalOcean) and ISPs

1. SpamCop.net - Sign up for SpamCop reporting

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------

💣 📧 Check if your username or email has been hacked

My Timeshare Phishing Email with subject Your Timeshare not what you expected? You may have a way out

For the record, this is an My Timeshare phishing email attempt that is recently going around, with subject "Your Timeshare not what you expected? You may have a way out"

What to do?  Report them, go to bottom of page. 

From: Exit My Timeshare <alert@qorinact.com> Subject: Your Timeshare not what you expected? You may have a way out

Phishing Link

1. https://qorinact.com/c/xxxx

How to tell this is a Phishing email?

1. Check email address in full, if it's not from originating company then it's phishing.
2. Hover over all links in email, if it's not from the company's website then forget it.
3. The best way is to look at message source, see below.

How to examine Email Message Source?

Now let's look at message source

1. Outlook.com->Actions->View Message Source. 
2. Gmail.com->More (down arrow to top right)->Show original.

Check for suspicious links, anything that does not originate from source domain, like apple.com.

-------------------------------------------------------------------------------------------------------------

Report Phishing Email (not as Spam)

1. Outlook.com->Junk (at Top)->Phishing Scam
2. Gmail.com->More (down-arrow to top right)->Report Phishing 

Report Phishing to Google

If you have received this email, take further action by

1. https://www.google.com/safebrowsing/report_phish/

Report phishing at Microsoft and government agencies

1. http://www.microsoft.com/security/online-privacy/phishing-faq.aspx

Report phishing for Web hosting companies (e.g., GoDaddy, Cloudflare, DigitalOcean) and ISPs

1. SpamCop.net - Sign up for SpamCop reporting

Anti‑Phishing Working Group (APWG) — forward to reportphishing@apwg.org

-------------------------------------------------------------------------------------------------------------

💣 📧 Check if your username or email has been hacked